Skip to main content
ITSI Episode Edit app icon

ITSI Episode Edit

Makes it possible to change status/severity/owner via spl, example:Built by Trifork Security
splunk product badge

Default Version 1.0.4

June 16, 2025

Compatibility

Splunk Enterprise

Platform Version: 9.4, 9.3, 9.2, 9.1, 9.0

Rating
5
(4)

Log in to rate this app

Support
Developer Supported

Makes it possible to change status/severity/owner via spl, example: | makeresults | eval field="status", episodeId="0000-000-000-0000", value="5" | itsiedit fieldField=field episodeidField=episodeId valueField=value This is a command wrapper around the ITSI API, and therefor you're able to use the same values as described here: https://docs.splunk.com/Documentation/ITSI/latest/EA/EpisodeAPI